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(57)Abstract 

PROBLEM TO BE SOLVED: To provide a repeater, a 
communication equipment, a controller and a communication control 
method by which a wireless terminal and a wired terminal can make 
communication while keeping the security. 

SOLUTION: A network 201 accommodates TCP/IP terminals 101- 
103, and interconnects a network 202 by a router 701 for switching 
IP packets. The network 202 accommodates networks 203, 204 with 



TCP-GW 401, 402 and base stations 305, 306 by a TCP-GW 403. 
The network 202 has a security server 601. The networks 203. 204 
respectively contain base stations 301, 302 and base stations 303, 
304. Mobile terminals 501, 502 exist in the base station 301, a 
mobile terminal 503 exists in the base station 302, mobile terminals 
504, 505 exist in the base station 304, a mobile terminal 506 exists 
in the base station 305, and mobile terminals 507, 508 exist in the 
base station 306. The mobile terminals 501-508 are TCP/IP 
terminals. 
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(57) [Sft] 

[Ml ir * » 5 t 1 a Loo, ««WmSlt t 

*yh!7^201 ttTO>/IP«5fe 1 0 1 
-1 0 3«rJS*U IP/^yh!:Sftt5;^^70 1 
fcJ:oT*yM7-^ 2 0 2 i*S»*Stt5. *3fh 
2 0 2J±TCP-GW4 0 1 fc 4 0 2 fcfcJlo"C*sr h 
^^ 2 0 3, 2 04^, TCPH5W4 0 3JC < koTSftS 
3 0 5 k 3 0 6^rllR^i-5o * v 2 0 2 ttir* 

a!)7^fw<6 0 1^o 6 Vt7-* 2 0 3 i 2 
0 4 ft, ^ft-eftgift^ 30U 3 0 2, gifcJi 3 0 3 
k 3 0 4£iR<£1-5 0 S«I3 0 llC(j:91^5 0 1 
fc5 0 2, IJ(lA3 0 2i:tt»lfllX5 0 3, XttJR 3 
0 4lCH:fBa*5 0 4 i 5 0 5, £«A3 0 5£il» 
KM* 5 0 6, t LTM^ 3 0 6 fcte^BSg* 5 0 7 
£508 *#«El-5. 5 0 1 -5 0 8 ttTCP/IP 




1 

[smsst*©^] 

ftE*S*li8*3£B fc iIIB#itS«*^g i © fB-?©E14& 
«K1-*aflrofc»K:, fICftlMtttttafcttEftltJI 
*ggfc ©IBi;:R£$it5& i ©-&*=. y =?4 r y->=t 
— > 3 $S£«fH-5S& l ©-fc*» y <T4 fflf 

®«}f#®fc, 

#SE-t-5ii«Sr *>m-rzmmm% i ^ y ^ -c r y 

i9E«#ftSixfctf»fcS<5iNTliirEh?v;*#- hJg 

ti&^&^mmftrztt $8&it5E» i ©•** » y^-c 

W»*fcM fc SrJMft Lfc r fc fc 1- 5 K 9 * 

$ ftfc^r&ifefcgg toraThyV^jK- vm& 
±©tim©<MliS:fif p y- f ^a^gEglc&^T, 

iiufesinafcfcgB fc 8iiis^i(Siss*ss fc © m x-m mom 

E*«EUfca«*fr5fc*fc, ME&IIStiS!*&gfc&j 
B*IM*Kft&0mfc:K:££*t*JI!i ©**» y^ 

ffiEBa&£aafcitiEtt&a£aBfc ©wciuebbe 
^ lt *ie«iasr^ 5 * fc , 

LT, ffiEBKffftfiE&ftfcnttttrfMjE-rs 
BSEBafcttJp-*- 5BBE««#at Lfcr fc 

sfcfc-rsy-f-^-i'gEg,, 

Sr«BEi- * a« ©fc ft lr fijEfc&SSSJfcgg fc Itfie^iUSS 
*&Bfc©M»cRj£$;h,.5l8l©-fe*s.y^7'yS':t 

— > 3 xigs-rstim, ^s8aiEiSiii4g*gBtstfiH^r 

&S£*gg fc ©ffi-CliilElf $8©SBE£{SliE LfcafEfcff 
5 fc ft fc S9f5^H«S*Sfi fc IMBttftttSgB fc ©IB fc 
RJfc $ *i 5 & 2 ©-fe -l y 7- 4 y y - »> 3 > c BBf 
3g&£. tre««M3l&BfcffNE#ftJ|*KBfcom 

K*=>i , aBfc«#i-3ir*»y^ 50 
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<i t fc r t i r s att&g. 
[S#£4] fltilBSi^SltifES2©-fedr3.y7 i -<-ry 
V3i-VaVKBBr*flMltt» frE£&»«*tSgfci&E 
# *IJ85l?gfifc ©IB"? h 7 i'**- hJ§£A±©tf f»©a 
ttfcfr 5 B5fclltrEg$&©ir*3. y 7 1 w 

y t -f -y— b s&E-y- h * mmz.&m $ tts r 

I^HX^ $ JxfcW«l«*Sg i © m t?S}EteSr«SEi- 5 ii 

«©fc»icitiEiii»«*^gtfrE#illig*ggfc©ra 

+5g«, 75MitTlS«S«g*Sgi:i?rlS=fl8*g^gi: 

©ra-efaieif ^©susT&iiELrtiaftSTfi 1 5 fc* ksse 

^«S«*^g t S9E#H«*^g t©ra^Kit$ix5» 

ItrEfeft * ii1t$& 1 2 © -fc * a y r- T y 

-y* >-«rfltTEMitlJS*^g^Mg5E#iSI«*gglciS* 

t"t5S!)»^go 

SuE*i«l«*^g fc ttC«|UI£g| ick: tt & nfcttSR 
SHc»-f-5, ffiE*i»4ffl*Sg75^St!l2^tti*gg(c 
RJtb*vfc*g«K:»UT % ffifB^I&fflS^SgfcfftEW 
WB3tSfiS fc © IB TSSKtt «SE-f 5 iHI © ft SHE 
MINI^ItS fc ffE*H4!iS*^g fc©RBtR^$tvS^ 
i©-t#a. yf 1 ^ry 3 >\zm-ti>^n. 
ilESi»iS*Sg fc flE^iS^gg fc ©ra-CfiEffi# 
OBKtrftK Ufca««r^5fcft K:ttE«M«3|£ttB fc 
iJE#H«S3*gg fc © IB teR* * Ji 6 11 2 o* * » y y 

a!)^-fflf*«l*#R«rA«Lfcr.fcSr<|*«fci-5®ai 

ggo 

[H*^7] BiHS9iciK«$nft:«litli«^iegfc«iRM 
l-iR^$lxfc^-«lig*ggfc©raT?h7>-^^- 

HrE««©rt8^S-3v^TlMrE*«S«S*i8afcffirEWi» 

lirE1'l»#aS:!jif^S*5i&#jci4MEil»«5tc^gfc 
ltfE#^«g*gg fc © IB gtt S: fiUGEf 5 aft © fc ft 
(cg9E^«Si«*ggfc ^Eflr*l4g*ggfc ©Pfl|cK^$ 

&s ^SSlJEM«lilg5(eggfc B 1iE*iS6SS*Safc©P f gf 
StFEtf ^©gll^^lELfcaft^fi 1 p fcftlclitlESSiSIC 
*i?g fc Sflf5*i8ISS*gg fc ©WfcRjfcS ft* * 2 ©-fe 
*a y <T4 TVisx.-- >a WcH-f5g««rfflv^-ca« 



3 

wiE«i>«#a*»^s*!a;v^(ci±ijE«6itsa85isifta 
t mm^m^mmm. t (om-emmzfi 5 fc»©a 3 ©* 

B. 

£ ftfc#iS&ig*&fi i ©R3 T y- h ? ^ W &g £ 

ft 1 ©y- Y f; *>f ssafc * LTltrE«li»«5|clBHl t a 
EW&i£*gg t <D|fflTiBett$:«IiE-$- 5ii<t©/c*»c 
ifflE&«ftig*gg t fiifE^iHiSTfcgg fc © IB fcR j£ 4 *. 

75Sfl5iE» 1 ©y- h am*^uT«rE*«ig* 

&git&E^ill«;fcggi ©ffiTSMBttftOSRSE^BE 
UfciiftSrS 5 fc»fctteftftJ|*ttB J: SirE*a«* 
g S t © W \Z K $ it 5 » 2 © -fe i y r- W T y i^ac - 
vtB8-tsfl|«Sr, Sl2©y- h^*^S5jUc3l# 
a-rigt, 

frE&«i*8*§£fi t iri5#«6*g5t5^e i ©ra©MfBSE 

tt»Sa&E»a«r{liUGEl,fcaB;6K aESS l <nf- Y $ 

w £ea»e> fries 2 ©y- h ^a^gfiic^ikt-cs 

a Sftfc»-&fc: x WEai©y- h^ai'igg-CffT.T 
SfcStiESlt a^ftfca i &tfgs 2 ©-t^o. y ?v r y 

^-^9 VKB8i-«g«SrfU < fflLT«IE»2©y- h 
****Bfca8V*T»flsaft6iai £fc*a 

[M**9] aa»fca**ftfca«£*8fii;fraiH 
fc*» $ itfc#«|ig5|c^g t ©W -cy- h C * << SB £ 
7>LT hB-Sl±oa«0*|t*fT*aBK- 

* 1 ©y- M> &g£;fr LTMESi«l4S*^gi fif 
E#i»ig5|c^gt©IB-eS5EttS:«E-f S»g©fc»t 
8&E£sa*8;fc£g t SSE#«Sig*^g i ©IB KK a * *t 

75MMES 1 ©y- h **-f 8B*7>LTae*a»jfc 
«gt#JE*itSUe5)c^gi:©BlTfitrEg*©BE*«E 
Ufca«Sr«5fc»CirEai*iS*ilgti(E*itMIII* 
SB t © R3 ICK^ 4 ix 5 & 2 ©-fc * a. y =r 4 y y - 
i/m flcHI-SgftSr, S5 2©y- f. poof Sgfcflt 

ifE^«liffi*gg i f&EWaiS^gB t ©IB ©firESE 
tt75Sfi9ESSEI:«II Lfcaftas, ftES 1 ©y- f ? 
*-f§Sga»e> liFES 2 ©y- h ? W gSlcgE{b LTS 
fS£ftfc»£-H: % BSEmi ©</- h^n-gg-c^o-C 
l^fctSE h 7 hgELk©aa$r*!lffl L1t<pm& 

asr«tiE5i # a $ tiitm 1 Rtfa 2 o* * y x * 7 y 

->^— > 3 VKH-*-6g«Xtrt»E l-7>^#- 
±©tta£fijffl LTtuESg 2 ©y- h .7 s ^ agfc jsv % 



(3) 2001-3331 10 

4 

[»*«i 0] M»»ic4R« ^ ixitmmn&Mmm t ^® 

£i±©^ffi©^ffi«rfr5-7'- h ^^'CSg^tS^T, 
a 1 ©y- h *^3lEg£aiiLfcjifiEra*|£#:/-feA- 

{k-r 5 s 2 © y- h i> I i % 
BtrE*y-feMt;$ftfcif# : 6»P,*7'-fe/us r sn)^^ x g, 
e* -f-t/uit®. *> t&frtiittii m%m&. h 7 vm 

at. 

iaEm3 ©y- ht^j&m-bm t>titttim&*7± 
y-h^w&g, 

[S*3®i 1] *y Kr?-^»cJ:oTffiZ»ca«'5j|l* 
»i©aaiggf:»2©a<tgst<D(ig-e, 

- hS£i±©aaSrfiJffi L1t<t>M$:<fT 4 p^-h^ 

trEai©a«ggtsg2©a<t£g£©isa-?;gsEtt«r 
«Ei-5aft©fc»»i x «&E»i©aaggia2©a 
ftSgi: ©W»css:^$ft5a 1 ©•*:*» Dr^ryvi 
— >3 v|cH1-51tS«r«^-f 2,^ 1 ©-fe^a. y x-<a 

WE* 1 ©a«8g t % 2 ©aft gg fc ©R9T?SBttSr 
«E1-5agSrt'a-t-5Hl!:B8Ea 1 ©*** !)f^7 

y^-s/BvcBBi-saatw^LT* WE»2©a 
«^g t l < tta 2 © attsgicgft $ tv 5 nt#-fb $ ft 

» MES^$ftfcif8lcS<5VNTB5Eh7V^jK-h® 

WEf«#aiJjiai-5a««r«aEa ima!Jf<f 

*8l«-SHfc3M& f: $r A{g L 1t Z t * i f 5 y- h 17 ^ 
-YSIg. 

[ft*^i 2] *y hv-fizx-oxtemzmmfimti: 
si©a<t^gim2©a{t^gt©^T?. 

- nw±©it#sr?ijffi ufct>«t*tT*5 y- h ^7o,W 
*attev>T, 

«n-r5aft©fc©«c, MEmi ©aft^giB2©a 
fgsat ©^jcgf^^ftsm 1 ©•*:*=. y x>< ry->x 

fltrea 1 ©sft&g t a 2 ©a«gg t ©F^-c«Ett% 
aKi-6a«*r*«i-5aKaEa 1 ©-fe^^. y r 

y->^--y3^(cilf SlfSSrfiJfflLT, mrESg2©a 
ftSgfc L < »±m 2 ©a(fgglc:§ft$ft5B|-§-fb$ft 
fc*««r«#flsr5««a»fl:*at. 
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gaffi*»#&#&«+*tf«$: tries lma^f^ 

[0 0 0 1 J 

fi*5 i XI MMWlc Ht5o 

[0 0 0 2] 

x-^flfit^T^^^iiS^oTV^o TCP (Transm 
ission Control Protocol) tt, ^Hx — ^ilflf::*^ 
Tilgt^fcS h7>*#- KJf^n h=t/w£ LT£< 

fc WTO <fc 5 <5 0 
[0 0 0 3] #MflTfc*5Jt5TCP^2x hJljfett* 
yh!7-^Mtl*t5fc^ TCP!*-**? 

<r^^#-»«r»oACK^»3fe*ilfc* (Mtt*-»i*J- 
^fcao*.T3«i) «±MStbfc*ft\ *5.fctfRTT£* 

[0 0 0 4] :^)f:ftltef B ]OX7^J;^y^ 
-0*fc«Mn#**o t M * ft* o-C, 

[0 0 0 5] roj:5ftm«*r»ifei-5fc«>l^ ^JSI-tBO 

(PEP : Performance Enhancement Proxy) £J$A1~5;fr 

[0 0 0 6 I Split Connection^ J: TCPn* 
^>aV£Proxy (WTTMSTCP-GW t Pf-S) fdft^T, 
fifMTCPa * ^^3^ MiSfiflTCPn *^V 3 yil:^ 
*1-*#ttT?*>«. *M^bM«l^>»2 

[0 0 0 7] TCP-GWWtM«*©ftfc 9 fc*»«*fc:AC 

*tfe»M) tt, tM^6MihS, TCPir 
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TCPfiselective ACK^-^->3 V (IETF RFC2018) i^fo 

£ tt 0 ig ^ ft V t C L tc t> O -C h o T f> £ V * . 
[0 00 8] Snoop proxy\C£Z>jj&\^ TCP-GW#TCP=i 
>£&^£^&LTL£ ?£)-C\ TCPO^^K 

*fc4&-&^tt, ^OACKOi/-^>'^#^-eH§ftjg 

$>5 0 Snoop proxyf± H TCPx^^'*^ y h^y77f 
*©«fAT?ttM«5fe^ACKtt3g*ftV\ *3fc<D 
b ©ACK*»o T*fcB*jRTACK*M**fc 
*y?y LTV^TCPx-^^ty h^S^i" 
5 0 ffiU ACKAS**ACK-e*>0 % **©M«*^b<0 

T, Snoop proxy#TCPx-*/*<jT5' h Off&SrfT 5 o % 
tZs Snoop proxyfi£^>f AT # Ml^lfcff 5o :oi5 

[0 0 0 9] r OJ: 5 ftM^-^Mtt, 5E 

»0llt3ft««IM#«:flFSi»r*T*9. *>o^»S«£T 

HS<ft*o 

[0 0 10] ^y^y M:*5lt5t^a!)f>f»ffi 
;£j$fc£LT, IPSecKJzSfcotfJ&S (IETF RFC240 
1, 2402, feJ:t^2408ftif) e t^yf^i^il/ 
^•fC»t**ix5dS % IPSecfilP^T-fe^rn. V T 4 

«-r5fcft<o*^;-e^s e ipsec-ctt. (i) ip^y^r 
^ ©M±TaE3ESixftv^»fc, (2) iP^o-Kfc 
StfbT^-^^MiTaWfcSiiTV^ftv^fc t % 
(3) tof-*ii*»©Mtli:JtoTt*Sftfcr 
SrftJE-f-SM^fc^o AH (Authen 

tication Header) IP^y ^tlP^^f KfeORQ 
^JfAU4Jtiltf4feftV> 0 ^^c, IP^-ro-K*c^t 

^ftH-rsatg^fe^o wOfcfcKtt, ESP (Encapsula 
ting SecurityPayload) £JBl^ 0 ft*5, AH^ESP^ria 

^ [0011] tt IPSec^MobilelP-CJt, IPSec^Mobi 
leIPO«S|g$r^oy- h r> S|^x-v?xy M£g 

it) IT> y-h!>a^M^-^*^hM. 75^ 
[0 0 12] 

[*M^#*LJ:5 t1"5Slg] B±RWtfci5l:, 
5c? *M*M£<0MTM*rfT5Blc % TCP-GW7!;MSnoo 
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[0 0 131 OT^y^ttlPSecKioTfiM* 
ftTl^IP^-f P-Kfc^**iSas, TCP£>1±fi£fa± 
£ii:£Proxyli. TO^y^fc£*ftS««rto!K 

7*-* lCSKtt*S*t<5 t s TCP-GlTOMSnoopProxyl* 

10 0 14] IPSec-^MobileIPftfflf«fflS^5 
<D&^£Proxy^g#fc54&<g\ ^(Dproxy 

$\zfr\i*>1ttb\Z^ %-?±A'fcVX\t*Z>s<'!ry b<0^y 

[0 0 1 5 J **Wtt±Ett*oBB«*»ca6* 
T 4 S Jh,fc 0 -C, TCP-GW-^Snoop^ft* £ *l 5 Proxyg 
fit, IPSecfcft*S:h,5-fe*A y<r^ y D }>=i/U££ 

MMW^SSfi fc #*l*g;fe3£g t <D x - * lift J; < 
ffV\ *fcIPSoc^MobileIP4ff-r«fflSJx« 

•ai-sy-h mmmm. #t 

Tfmmmmjj&<oik&z a « 1 1-5. 

[0016] 

#»«*Kfi fc <z> m "C® g& tr IMEi" 5 9 ft <o ft lb , 

mumm^mm t mmmm^mmm t © in kre s h 

*£;fcSg fc li5E#it&i£*gg t <DlBT8Btt t«BEi-5 
a«tr>t>lir6l(K:ttE» 1 i?*^ yr^ry^x^ 

»E^j»M*«fijrgfSS*i5«p#ft SixfcW* 

aitr 5 ttE4>S9*^aflri-6iim%M 
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[0 0 17] ^JBW^Jt^y-h^x^SBIfi 

£g fc tJE#»«*&fi fc ©WCflJ ^O^HE^r^rSE Lfc 
aflKrfrSfcfcfc. ltrEMi8l«g*^gtgtrE^jSig*S 

a >K:B-*-6flMMr*»i-5* 1 y ? 4*41111 

H&ESiiSifg^gtgiiE^jS^Sgt^ra 

5 «>EBK#«K $ tilzft n& ± true 
CTWfclcft* bfcff Lria 
jBSl©tH!l7^7ye/x-> 3 ^tBli-5««fc 
mmLX. lffEBIE^«iESnfc1f#Sr«IEl-SBIEft 

[0 0 18] #3&B£>a«ggf±, «liRH(ciK« 

20 *a6«©v^r*t^fctt»t&n, tteftaa*twj:iMB 
*«w**«oioiB-caKtt*«iEr«aflr©fcftt 

SuEM»ig^g t MEW^SS*^g fc oKtc^:^ * fi 
5SHDt^!l7^7y^xH ^ 3 ^^BI1-5it«> 
7!?MMEM«|ig*Sg fc mlE^«l^*Sg t (0^Tt5E 

1*4t^>KiE«r«IELfcaflr«rfT9fe«>^ttE*aa3|stt 
g i «5E#i»«a*^g t o IHICR & $^-5M2(rj^^^. 

is«tttE#wa*««fc©n-c s®^± 

10 0 19] **WJC*5Jt5S9»Slfitt, tl«H 

«8*KH fc tJE*»«*gfi to^lc^^^^S^lo 
■fe^r^ yf^y^x^ g >\Z®1-Z>®^ 75SltlE 
^«*KfitlJE#»«*^Ba:<Dfffl-eitrE19a^B 
ffi«r«EL^a«Srff 5fc»fcttE«il»«*^«fcltfE 
#iSig*«Hi: onfcK&SftS £2 ^t^ay^7 

f-f7y*/x-va >-^rME^i»^*^g^MtuE^il& 

[0020] *fc % *«^osyfflisigwt, &Mm\zik® 
t<or$v b v bm&±<Dftn<D*m<Dmmz?f 

K«^Bftbnfctt*aiJ:»i-5, 89EM»jg*8fi7i 

attE«ra«^Kfi^Kit&^ttaftic#LT, ue 

5^ aitttt^Kfij:ttrE#lia^Kfij:om-cSSttt:ftBE 
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-r 5 aft© fc © »cii&!E*ii»*g5fc&g 4 MiB*iH«*g® 
t <Dmz.&%.&tiz$ts i (o-tdf-a. y x * r yvi-v a 

m& k © m TlitrEB$l©SliE£«lI L fcaft £fr 5 It © 

[0021] m&m 

5aftggfc*5^-c, ttiisita©rt^(cs^v^Tg&i2M 

SM^KS 1 faEW&ffiS&g t OH-?* JKfcBfcff 5 

»ff tti&EB»iS;|c§ig fc «IE*ftll*S 

Ht©W-CS5EttS:«BEi-5af80fc»t|&|B«!tiKU8* 
gg i StfE*iSft$*gg t ©Kl teR36 S*v* Hot* 

«S*^gf:MIH#i»jS5|c8gi©«-cUEtUa©SESr 
«BEUfcii«SrfT5fcft^itrlE«H6Sg5|£iggfcfi9e#|| j0 

«8*^g t © !ta tcRjg $ ft 5 b 2 <o± * a y 9 w r y v 

#«Sr»^S*4v>#^{cttitrE»S»ig5|5»gtiWE* 
IS«S*Kgt ©RgT?aft«rfr 5 fc*©® 3 ©-fe^ra y 9 

[oo2 2] *fc. **w©a«i»«>tratt, bwrk: 

JRS * ftfcB»J8*i!sg t *** ico* $ ft 

&gt ©ra-cy- h v^^mmzftLx v 9 h 

&$5fc8g t © K-CSBtt &f*BE-f 3 aft © fc © KfiiJE 
B*8*8*gg fc HtlE*FiS6*g;fcgg t ©RI (CM SftS % 
i ot#a!)f^ryv'x->3 ^KH-raBSL 75s 

HiFEB 1 ©y- h » *4£B*ft lTttEBtttt£&B 
iBEtffciSBcBBi ©WefrEg«©BIiES:«|ltfc 
aftfcff 5 fcft(::tiE&ft*a£gB& H5E^r«W*Sg 

vic§8-*-5t#$g£. SB 2 ©y- K?Wggtc3l 

ME«l^ffi*^gi:iiE^II4S*Sgi:©^© « 
§aEffiEtt^SME^IiESr«IE Lfcafttf. ME® 1 © 

y- h V * ^ gga* t> tote® 2 © y- h ? ggicg 

fbL-C&S3ftfc.j§'g-{;: x UtrEBloy-h^a-fRfi 
fc**i&31£li&E3l # K * ftfcB 1 & V® 2 o* *a y 

x -f r y vai-- ^ 3 > mia-r 5 g«srfijffl ltme® 2 

©y- h ^^gglcfc^TBfl^ftSISi: Sr^r-f 
[0 0 2 3] ^^feMtSafifcl^feli, B 
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«lffi*^g i: ©KIT? y- h ? * y( gg t X h 9 

4?- hJ§£U:©tt$a©<fjS=HT 5aftSlJ^Sl^alcj3v^ 

m^y-h^a^gg^^-UTMEaiillilg^gg 
t ffiE$HM8$3gB i: ©MTeKttS:«E-f 5aft©fc 
©»cfli}EMiHJi8*^gi:lt(E*i68ig*^gi ©IBI»cR^ 
S^5»l ©-fe^-a. Dr-fTVi'i— >a 

a. 7smff!&% i<oy-h<> =4 mm* Lxisii&mm 
^mms-ttssm^m^mmt om-cmeB««>BK«: 

«EUfcaflr«rfT5fc»KUEB»«5l5RBtffirE*i» 

ss*^g t © ra ^ $ *i, 5 & 2 ©-fe * a y 9 -f r y 
^— >3>tn-f5if««r, n 2 a? -ht^mmz 

31 1 itl-lSi, itlEMillig*5Sgi:flSE#iiliS5fe3$g 
t©K©ME»Ett75SfrESSESr«SELfca(ti^ IS 

mm i ©y- h ^a-< gega>e>frE$&2©y- n>a>< 

atBfc«fl5LT«ftS*vfc«#K s l&E®l©y-h^ 
*1'^gT^oTV>fc.i[Eh9>'^3K- M£Lb©ffifa 
«r«« Ufc*iffifeaSrttiE§l t SESJxfc® 1 &Ut® 2 © 

-ir*a y 9^r y«/x-'/i vichi-6B a&VME h 

9 >^ #- h^«±©^BSrffJffl LTS9E® 2 ©y- h 
^*-<^g»-*5V»TBf^$*i«iet«r#i-5„ 
[0 0 2 4] **W©*J»t5y-h^a-<36g 
tt. BBlWtiR«$ftfcBB«5|C*gt#i»|HlCJR»$ 
ftfc^rUffi^gi: ©^-c h 9 NMW±©1S# 
©■fiffiiSrff^y-h^^WggUfc^-C. fioy-h 

^*-f*BtaabfciWBflMi**7 r -fe/ufl:-r«»2© 

y-K^^^ggt, ltFE*7'-fe^ft;$ftfcB«*»f)* 
y-fe/t-^rSiD^t, SuE*y-fe/Msay^ftfcff#«: 

i&e h 9 v^tk- vm&.h<Dttia.zmm Lx^m&ft 5 

»3®y-H>x^git, BE»3oy-h^*-fB 
g^ f> ftfcffla^r* *y-feMb^S i: 

[0 0 2 5] *%^©*3lt5y- ht>^^^g 

14. K^-^tcio-cffisicaffBiig/imi ©am 
^gtS2©int3igt©ra-c, \> : 7>xx-hm&.± 

T, SuESl©aft^Bi:m2©iiiftggi(DK-cS}E 
ttSrftlE-rsaft©^©!^ iifEBl ©aft^gt®2 
©aftSIB i: ©K tcRjg ^ ft 5 ^ 1 ©-fe ^ a y 9 w r y 

->^-->a ^tcia-rsfwasr^i-sm 1 ©-fe^a y 9 
-ffta«»¥Si, 8jE3ii©a«gESi:&2©aftg 

fi t © PQ X® Btt «r BBi- 5 aft * »i- 5 M »c B8ES 

UT, SJlES2©aft3$Bt.L< li®2©aft^g{cg 
ft $ ft 5 Bt#f b S ftfcff $8££#-<b-f 5 ft#S#-fb#S 
i:. BtEB#{b*ftfcB«^S<3v^TBtrEh9v^jK- 

«rtB1'li#B*aMt1-*»«*BE»lo** a 
Ty->3i-->3 >(cM-t5ff®=Sr?iJfflLT©E{b 
fb) i-SttBW-i-fb^Bi^fcB^Sfts,, 
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[0 0 2 6] #B«©fctt*y-l***-fgH 
gfi£3l2©aftgS*©ra"C, h7>-*#-hB£Lb 

©tit mzmm vit^mzn* o v wmz&^ 

tt*r«E-f5»«ofc«>K:. itffBIS 1 ©aftgfi£Jfl2 

v-3i"> 3 >lzB-r«fttt*ft*1-5B l ©-fc *~ y r 
>r1tS«^#gt x ltafB|gl©aftgg*li!2©affig 
S i © m 'CffiEtt€r«iE'r 5 aft * * mrt S BtcttBB 

lot^yr^rys/i^g ^fcB1-&fttt*HJB 
ut, itriB^2<DaftKfifcu<tt»2oaft^ajcs 

l*B£LL©ft tt*3R|jfl LT 4»£l*Q.3t£fir 5 fc . 

[0027] si»aft«^j:^«-«afts^ 

f±, *nbtK«tflt«oaSftt>U<tt+**4S*t« 

*^<m«t>o"CJbotfcftv\ ttz, aftgftn 

[0 0 2 8] 

[0029] Hiii**wo*y hi7-^«^ia-efe 
9, 7 0 1£&A^ *y M7-^ 2 0 lBi* 

y M7-^ 2 0 2«fcJc^«tfeix5o rix&OBB-C^y 
h?^&«©±##MfcoT^Tfc«fcfcV^ 

7-^201 tt#»IPli;:WE SftfcTCP/iPSS* ioi- 
103 (^ri»«g*^fi) *ft«U 

7 0 l|:tot*y M7-^ 2 0 2 fcffiZ&gfc 
Sih/Cl**. *y 2 0 1 fcBfi©*? 

M7 h!7 — ^ 2 0 2fc»BS;h/CVvx:t > 
*y h!7-* 2 0 l*S*y h!7-* 2 0 2 

h!7-* 2 0 2«tt»»**aK- b l/TVSfc© fc-f 

^SteMobilelP© <fc 5 ftlPJBfc J: * US* * — B© 

ftV\ * y h V — 9 2 0 2 J*TCP-GW4 01t40 2iK 
ioT*y — ^ 2 0 3t 2 0 4 t$: x TCP-GW 4 0 3 
CJ:ctS^3 0 5 t 3 06 ^$: s **t*WDl»1- 

[0 0 3 0] TCP-GWteSnoop Proxy© <fc 5 4TCP&SBL 

fc-«ttft^o**>-BB"C*oTt>Bfcftif^ % 
TJiTCP-GWTftSf 5o Kin** h!7-^ 20 2ttt^ 
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^ 9 0 1 *ftr> 0 *yM7-^ 20 3t2 

04tt, **i«x*ift» 30U 3 0 2, m&m 3 0 3 
t 3 0 4 £Jfc^1-*o 30i^xy r fcfift&B 

^iR**Jtfc»ill«5t£5 0 1 t 5 0 2 V 02© 

TfcflBBH»cJR*S*tfe»«iH5fe5 0 3. 
3 o 4 y r KiMtBBBlcft««iifc«BN»E 5 o 4 

t 5 05 % S*JS3 0 5©3iyriCtt«BB^JR*$it 
fc3£Sl$&5|c 5 0 6 x *:LT&ife^3 0 6 ©^ y TlCttSt 
BBlCft*&ttfclWM3t£5 0 7 i 5 0 8d5#aEi"5tt 
-B«ra*LTi*<5. ^»ig*50 1-5 0 8 (BBB^B 

S) f«CP/IP«5|Ce*>5 0 

[0 0 3 1 ] £©±5fcfcRT-C, BitfB*ioit 
^Bffi*5 0 l©WTIPSecfcfUffib"tir*Ay^-f 
«KUfcTCP/lpa««rfT5»fr«rBS-r5. IPSecfcJ: 
5a«*rff 5fcftfctt. B*l 0 1 *^»Sg5fc5 o l fc 
©W^IPSec SA (Security Association, &TSA£f5 

[0 0 3 2] SArt-*fpj©||^^^i-(DT, B^AOB 
«fclfi 2 0©SA##g £ 4 5 0 1 OOSAfcB/B £ ft 51? 
J» ^^!)7>f/o ha^ttloKiMRSJi,*. flu &g 
fc^jSoWTBB^SAfcRJtLTfcai^ SA«rK»Ji- 
SftBtt, (1) SPI (Security Parameter Index) „ 

(2) IP destination address, (3) Security proto 
col identifier© 3 oTfcSo SPIttn— *A^"C— *4 

tryhW-efcSo spiwt, AH*sj:t;ESP^y^c**ix % 

1"5fcib^ffit)Jx5o IP destination addressfiSA©^ 
M>%7jk-t, SA©^^if±j:y K^-f^^rA'CfcoT 
t>. 7T<tT9*—A'<Dj: 54fc©T*>oTt>ftt\ Se 
curity protocol identifier^ SA3ftSAH75SESP*tt5 

[0 0 3 3] t^raDf^yv'x-v/ayf-^- 

* (sad) fctt, BTOJ:5 4ilMI***h6. 
[0 0 3 4] • i/-lrlsxigr'%jj$>'* : AH7!rSESP^ 

[0 0 3 5] • ^^#f*^^-/<7D-: 

« [0 0 3 6] • Anti-reply V K£ :AH*fcttESP'< 

[0 0 3 7] - AHlff^SSIETVl^y XA X « x 
#B#W. *JJ:t5AHtB5ii-5^7^-^. 

[0 0 3 8] •ESPflM|:l»*flsi:BETA'=fyXA, 
B, Sl«ft©tt, «©^#«Fffl, *5J:t5ESP^Bat"5 

[0 0 3 9] - SA©£##W: r ©SA#»fc4SATft# 

5(? B*.biu!cJtixtfft6>4v\ i*HI^>^-/</k Tbmit 
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[0 0 4 0] • IPSec^D hn/U^— K: hV^/K V? 

[0 04 1] . Path MTU:«»Sttfc^^O**tran«nii 
ssion unit (IP7 9 ^ ^ h 4 U a efO/<xBA TfiSI 

[0 0 4 2] ^-IfOTKy fcJloT, IPSec* 

kip h 7 ^ >r y * fcSffll- 5 a>£ft«> 5 r t &v # 5 0 
o*9IPSecSri8ffli-5d^}6\ Sffl-f 5 4f»s 

U y t*-^-<— * (SPD) K^SftTV^o 
[0 04 3] SPd<D^> b V ft, ETFOselectorKcfco 

[0 04 4] • Destination IP address: ©ffl^l-^ 

[0 04 5] • Source IP address: ©ffi^^i - ^ <DVh 

[0 04 6] • User ID: A<£:x— f 8&BiJ^P 0 
[0 04 7] • Data sensitivity level '^^Tb^^t 5 

[0 0 4 8] • hJfXn h^/V^UDP.TCPft 

[0 0 4 9] • IPSec Xp h =r^:Ah\ ESP7Ir^AH/ESP 0 
[0 0 5 0] • Source and destination ports :TCP7i^ 

[0 0 5 1 ] • IPv6 class, IPv6 flow label 
• IPv4 Type of Service (T0S) 

Z<DX 5t-0SU£*L5SPD£>#:x:x h y \z\t^ loj£Jt± 

[0 0 5 2] SAttWCKfcLTfc&V^ Internet K 
ey Exchange (IKE) K<fc oT ^ t h »J 

&ThZo IKEIi2o^)7n:— X^^Jt^tv5 0 y ^ — 
XlTte, IKE SA£?6ftL*<D&0»do££&®5o 
7x-X2"Cft IKE SAOTT, AH#Mti:ESP<Dfci&<DS 
A<D^7^-^«r$m-r5o 

[0 0 5 3] ST. Ta>-GW^ft*Stt5^n^v-3jS« 
f^SfcfctCte. TCP^GW^SA(D/>^< khSttDtSmZ 

ftotv^*W*>5. :ot«ittJ:JA*»lcfl, 
fcfcfc#R4flM»-Cfc*. 

[0 0 5 4] ^<DJ:oti:yu*^-zmm£^Ztz£><D 
[0 0 5 5] (*3t 1 ) *Sif 

[0 0 5 6] (*a:2) IKE^7*-X2"CSfft*ix-5S 
Al»«A*fe#5 e o*5, IKE SA<Dfi?«£fcloT^TIPS 
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[00 5 7] ittB) SkWTtifrnmAfrblMk* 

[0 0 5 8] (#5*4) Xu*v— gt>. 7ir^1r*3.y 
x>rirw^SAtif*8££^U 4r*Afc*Kftfe^B* 

[005 9] ftTm *St3-fc**4fcoVvc»L< 

[0 0 6 0] *tOfc (**3) Ko^Tx^S. 
0 1 t&W}iC3i5 0 1 ©IB-C* IKESAjWWe.SJx-0*5 

ri 5 £>5 0 IPSec SAte££ft,TV*4vv&§£*tt s Sgjfci o l 
GHr^y^-fflMMfSi 1 2 4 t^y 
x>rfi}«S«i£S (B*«3) ) t»»«8*5 0 i©t 

^yx^lfSSfSl 5 2 4 (04#S V t^ayf^f 
^*S*{fc#J£ (H*S3) ) <DRy-C, IKE<D7a:*-X2 
^¥H"eiPSec SA£$t&-fixtf&v\, ir^r^y-r^lf^ 
til 1 2 4 (SR^g (S#Jg 7 ) ) , 1 5 2 4tt, 
§ fe<D^OSAD£SPDK, w^IPSec SA^T^U^H 
^ »1-5flJ««rlB1fr*-S 0 4*J, IPSec SA£ LT, Xn* 

ftV^^dSfcoTfc&^o mjiSPD(DselectorOdat 
a sensitivity levels ^(D^SU^tf 5 #®£I3:tt 5 

[0 0 6 1 ] ^Tttt, ^n^^-©^«E4r»F*1-5iP 
Sec SA$ri(C&5o ^n*i^O;fr££i^L4^IPSe 
c SAtCOl^Tte, «*<0IPSectl^«Jr.Siffi-5 o 

[0 0 6 2] ST, «£l 0U«*5 0 1lt * 

^yr^tw<6oi (t^ayf^fia4*fj| 
(»*«5) % -fe^r^yx>fm#ga^¥^ 

5) . ^Jffll^M (n*«6) ) *J:tWCP-Gf4 0 1-4 
0 3SrftST#5^a^LT&5 0 «*.tf, Ztlb&h 

h 7 — * OTCP-GWfcft* $ Ji5 y d ^ 

^fcft^li, i?*^ y^^f-^-^e o KciPSec SAtf^ 

40 itt. S^ioiMMS* 

5 0 l ^ t>v^-fit^-*lcttBBl$ jirt^ - 

.4:*<R£LTV*<5. 4*5, t^yr^^601"C 
4< , TCP-GW4 0 1 ^B^IPSec SAlf LT t>TC 

1 0 l»S8*«*5 0 l * 5 B*L4»ttitf 
TCP-GW J ?>Snoop4^tt, **^^*«E^«5fe 
*»fe**.4V^T, w*ttt*>4»?av^feTtt4v^ * 
fc, ^*l 01, ^Sj^*5 0 1 (D^^-ffi^m^LXh 

50 *rJ:D#jl«cieST*5»«i*5fe5 0iiSlt«^5i:ffi 
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£-T5 e *1\ -Jx^o^frfSiPSec SAtM&ftS-r 

£>l*l Jdftr ^CO-fe 3r a y 7" 7 V i/ 3 &g-C 

*>5 e t^.a!Jf>f7y^x-i/3yu x IPSec^r^p 
fcfi^fSo »M*5 0 1tt* a Jf-ft^6 0 
10f?3t\ **JfcIKE SA«r*£U fcfcAHiESPOpi* 
£ffiV^IPSecSAfc?|5i1-5o ^(DlPSec SA£/8l>T, 
#Sj$3fe5 0 im a yf-f««Hl 5 2 4^P>, 
«ayr>ftw<6 0 lO-fe^roLy^^^WSl 6 
2 4 (B5#«L t^Df^Wfg (»#S 
5) , -fe*»y^flMHB*#a (»*3S5) , ir*^ 

1 £^gj«3fc5 0 1 (DP^07 p a^>--^^ff^i-5IP 
Sec SAflJ««r*«i-5. 9 7^ffif«<f3ll 6 24 

i*. ^^1f«$rSPDi:SAD^f5S1-§ 0 

[0 0 6 31 0 2liTCP-GWO^p y *«J*BT?*> 9, ± 
^LfcSnoop ProxyOi 9 ft fc<0TfcoTt>&< ^rtf):® 
❖©flMttftft*. 4fc83li8*10 1O^a*^i 
B4li»B«8*5 0l(D^Dy^at 

ft*, H^ona^wat^-^©^ oft 

[0 0 6 4] J^TT. TCP-GW 4 Olfi, «*1 0 1 fc» 

*s*5 o i <Dm<oyj7 4 y?i&mi,itzk%mm 

\^ IPSec SAffifft&-fe*3.y x-flK- /*6 0 l^&ftft 
1~£o -r-Cte. IKE SAfc£oT\ JbE^O/D^^ 
<E8rflF*f 5 IPSec SA$rtt^5fca!)«) h77^ y^fc 
^WLfct-r^o IKEttUDPO/K-h#-^500^ftJ^LT 
^5<£>T, IPAAftl 4 2 3-eiP^y^*fl.TV^*ttf, 

-©aflioflqfiE^te*^. 1*10 1 k&m&ms o 1 
»*ioi ^#«ji*5 o KoiH-c, 

oT, TCP-GW 4 0 l*>ir*3.y^-fflH**311 4 24 

(iiot*ayf^it»«»¥a (n**i, 2) ) 

t*a!)T-ft-/<6 0 1Ot^a!;f-fi»ifI 

1 6 2 4l£*fLT, «£l 0 1 k&W}i&*5 0 1(0^ 
IPSec SAfcBBi"5flWl*r*tt1-6J:5fcj|*-J-5. 
««*1 0 1 £&ft*g£5 01OIP7 KW^OftfrU 
S«i ltfftt*a!lf-ft-/<6 0 1 fcBfcLT** 

[0 0 6 5] t^yf^fw<6 0 1 G>-fc*a. y 
Mfll 6 2 4tt, TCP-GW4 0 1 Ot^ra. y ffft 

0 1 t^»SS*5 0 lOP^OIPSec SAS:J*-dTI*41**» 
fcfcflftlf*. ftifftfc, ^OgjfcfilPSec SA^^^i"5 

5o ■fe*a!Jf-f)»«ffI1 6 2 4ll, 

H*(Cfc9lPSec SA*««r#5fl[jC % TCP--GW4 0 lOt 
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y T >f ffi«ff3 1 4 2 4 Id, IPSec SAfi?$|ifc«{fc1- 
[0 0 6 6] roj:5lwLT, TCP-GW 4 o i©t^y 

TVlfiWfSSl 4 2 4# N t^!Jt>ftw^6 0 1(0 

■fe^a.y^^ita»ai 6 2 4^e>, «*i o 1 t&m 

jg*5 0 lOH^IPSec SAtC§ii-5if#^#5i:, Zfl 
tt^allf-flWffll 4 2 4 0SPD^SAD^faft-f 
So HK> IPAASB1 4 2 3T?7-<^^«rRj6LT. 1 

70 1"5IPSec SAfcJC*/<4ry h ^d»OTCP*>a«"C*>5 i 

v*5^*c^y*i-»*fctt, TCP/§$-e_htf5<J;5fc: 

1-5. 4*5, IPSec SAffiaSWW^AT* M-«B»j& 

-C> JEtcig^i o 1 k&®1&M5 0 l (OlH"t?©a«^TC 
P-SW4 0 1 £a®t-5 fc JLiiSftSJi^fcHu S*4rS 

[0 0 6 7] fcfc, :/n*$/-fcfHrj-*IPSec SA«r«| 
^UT, «3fcl 0 l^PEPfUflT^y^r-S/gVl 1 6 
2 (®3#fi8) t»»S*5 0 lCDPEPflJfflT^y -ir- 
^3 VI 5 6 2 (B4#JB) *a««rfT5. ft*, 

W£v>#tttf«rt6"efc* 0 PEPfUfflr^y ^ 3 yi 

1 6 2#PEP«Jfl7:/y V 3 VI 5 6 2l^tt, T 
&<0=i*?*sa>&&Zft5 klr 5 0 PEP^tJfflT^y^ 
->3V116 2lt 0H;LtfUNIX (SftjftK) Oso 
cket*f y^7x-^|:iot, OStC^LTTCPn^^i/ 

^V h y <^Data sensitivity level selectorO<it k L 
XW>fe£tl% 0 ffi^selector^ffiii, destination IP a 
ddress£ UT^»)«*5 0 1 OIPT source IP 

address k LT^g* 1 0 1 <Dl?T K^, UserlDt LTP 
EPMfflT^y^r— 5/3 VI 1 6 2(0^-if®5fH\ Tran 
sport layer protocol k LTTCP, IPSec protocol^ L 
Tftl*.tfAH/ESP (ttfcAH*5V^ttESP^nri6) % source/ 
destinationportt LTil^ft^- h#-^ft^^ft5 0 I 
Pm^SPl 1 2 2«re«LTl*5-fc* a y^-f^Wta 
« 1124H, UlAlP/<4r y hft^SDPac V J. y 

^iSf 5IPSec SA$r^#*t^ e SelectorjftS±|B©« 

«rff#1-5IPSec SA*»i6i-5. 1-*fcir*»y^f* 
ifll 1 2 4tt, IPSec SAtC^^$tUfcT/V=/y XA 
^®ft^^«toT, /<*y h***flsU»liEOfcft©fl| 
«*rftJDl"5 * 3 112 6 £f&!iE&!& 1 l 

2 5Srft|»i-5. h7 V^tK- h^€— Yk h^;^- 
K0 5*>. wrTttlft#«:fiJ«-r<50T, MS (a) © 
^yh«:»iftO/^yFflB6 (b) |:^t7*- 

50 ^s>R;:fta D -»^»#ft»fcttTCP^y ^ 
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ft («*.«TTL4if) tt^*4V\, 

[0 0 6 8] :©i5l:teI^fc/^yMt, ^Hif 
1 4 2|:iot^y h7~* 2 0 1 iciiff £ 
ix> JEfcA— ^701,.*y M7 — ^ 20 2^ft*L 
T, TCP-GW4 0 1 KlS(#i-6. #»«iIFA**l 4 4 6 
^rSTIPA^a 1 4 2 3»ciO#Lfc/<4ry M*. SPI 

(Security Parameter Index) „ IP destinationaddres 
s, Security protocol identif ier£)3oK: «fc otSBOS 
*L51PSec SA<^£K^oT&31£ix£ e 

fthcovhr>. t^rayf^tssfii 4 2 4iact 

2 4 #BBtttt 1 4 2 5 (MEflM¥ft (|«| 2 ) ) 
4 2 6 (ftr«tt#fl;#ft MMt*l) , If 

«i*ai) ) fcisMLT. 0 6 (b) m 

^"MPSec/<^y HSr % 0 6 (a) IC^t^O/^ y h (O 

[0 0 6 9] K<0'<*yhOftnt*bT&*miQMt:ft 
5 a>5A»*rlPA*» 1 4 2 3 atfyff U t«l«a*tf 5 
t>G>£ LTTCPAASB1 4 0 5 KJt1\ ftfcWMfefllK 

x9ttTcp« h±xicmwt*mm it t 5 1> 

OTfcSjftS, tt«*tt«>««LTTCPK#TCPf»«Sr«« 
Lfc*l8SrLftv^5^LTt>Av^ (IP**8£4£) e 
£©/<4r?hHt % *©rt*lcjSCt\ TCP*&SU40 
2 CMK#A (11**1 , 2) ) O^i»-«Sjftl4 0 
7 % TCPA#SB 1 4 0 5 J; tfS&TCPffl;^ 1 4 0 8 T? 
&mt$hZ> 0 fliUts SWs<fryhtZhs Srfc4TCP=i* 

5o *BftblS4*^B VfciftbDl"*ftifUT,, ft 
*TCPffl*«l 4 0 8fc+«f 5. TCPW*»1 4 

0 4^feSYN/ACK«r3gi- (Snoops ttfi S 4W . 8U 

/<y7T^=tr-*r»8ILT^b, fti&TC 
PtrJ^aJ 1 4 0 8 SHI, TCPffl*« 1 4 0 4 *»& 

*©^-#/<*-sr h»C#-rSACK*3gi- (Snooptf>©^|± 

2g*4H 0 4*5, ::-c*otv^^^ni, tcp- 

GW4 0 l^ritLfct £T«;fcl 0 1 
«*5 0 l©IBTag«SixTV^5)&><DJ:5^, IP^y 
^07K^7-{-^K^RtSJitv^ 0 o*!K TC 

py- h 4 o i ffswtustuTv^o 

[0 0 7 0] ftjRTCPfflAtt 1 4 0 8 *50:t5TCPffl*» 1 
4 0 411, /<4ry h^TlPtb^^l 4 2 2 ±*c=. 
yf^t8SfI1 4 2 4lt '*fryb<D^nfrbS?V<D 
= >hV «:W3iJi-58eleetor1f*«r#T, SPDSr**L 
T»«1-5IPSec SA£#5 e IPSec SA^ITf £|f f| 
*SAD^b*»LT v **L^jESCTI*#«IBl 4 2 6 t 
RKtRfgl 4 2 5*r*|«lLT, StM-jrj, f£0 6 

(b) fc«i-ipsec/<*-y 
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>rv F^otk TCP-GW^§m^tlfcIPSec^>5ry h 
TCP-Gff^baHtStt5IPSec^y V©rt«tt-jR 
fcft45. «ttf, TCP-GW 4 0 Itt. ACK*r*«H-*© 
T tt * < £ Jfc 1- 5 © "CfTIE <Dtz#>\Ctt5-£ilZ IPSec (OA 

H4V^LESPOV--5r^#^i-jK^ft45o 
'<**M*. M»fflIIFffl*Sl 4 4 33&*e>*y h!7-^ 

2 0 3^ *m«IFWA«l 4 4 5*»6>*y M7-^ 2 

0 2^, *ft^;h,£{i£ft5 e 

[0 0 7 1 ] 4*5. Snoop©»-fr tt % Snoop proxy |Cg« 
i0 StbfclPSec^y hfc. Snoop proxyd*fc2Ht £tl<5IP 

[0 0 7 2] Snoopi* J^ACK* fc&T 5 £ k » 

miXh*). IPSecttlC#fclH«*V\ Snoop##*<0TC 

tt^-y ^A'Oafcr-SrSai-Jlff AV^, IPSecOAnt 
i-replyJC £ o t$fiffl*"CjSt btlZ PTfBtt** £ 5 e 

Anti-reply Jr -f V K * £>«Kffl ft (Cifc 4 o T V * 5 S> 

20 So rixfcojfeftiSiUfcSixtttf. SnoopO#^ic:ji s 1 
PSec/N'^ y y e>7c^TCP/IP- >y ^flj ^$r^ 9 

*SOTPSec/^y KJcaeiEi-SifcKttJSv^ Sot, S 
noop proxy KIMES: & it S fc * « «r * 4 It *b 

"^fcSwtttlPSectt^ftKTffrSo Snoop proxyJCBf# 
?r^< fc«>OSAffif««r»Tff«|g-et 5 0 
[0 0 7 3]*? 2 0 3^3l«Siifc^5f h 

^ icttBi-at. wiittXttJnso iftAT4Mb«3k5o 

l^J:o-cS«*ix5o ^IFA^^l 5 4 3SrSTIP 
A*«51 5 2 3lCi!l*Lfc/^y Ml, SPI (Security 
Parameter Index) N IP destination address, Securit 
y protocol identifiers 3 Old J: oTSSSUS tl 5 IPSec 

SA<Djg£K&oT&3!£;ft,<5o ± * * ]) 7- 4 titWgm 

1 5 2 4 ^^gE^fg 1 5 2 5 fcflHHM 1 5 2 6 ?r$ijffll 
Lt, 0 6 (b) lC9i-IPSec/<^r? KSr, 0 6 (a) \Z. 

TV^fcffif«tt % PEPSpJfflT^»4r-i/3 VI 5 6 

[0 0 7 4] Me (^4) x o^!3-fe^frr Jf-ff- 
/<6 0 1 5&5iPSec SAflWtr^rtU 1 0 l ir^Sig 
*5 0'K *5it5TCP-GW4 0 1 fc£j*LfcIPSec SAif^ 

[0 0 7 5] ^»C^5 0 1 (Dir^r^ ^x^lfa^Sl 
12 4#, t*ayf^t-/<60ima5f-f« 
ifll 6 2 4fc*tU «*1 0 1 fcOlHO^odr^- 
©^«E*fr*1-5IPSec SAflMI tr triM" 6 X o \z#mt 
5o ft««CttIPSec4^T-fe^3. VT-dDfeftZtlltm 
50 Mlrffi^. t^y^MfI1 6 2 4tt, tt« 



I 



19 

i , *s J:tncp-GW4 0 1 fc««rt-s 0 #»*S;fc5 0 1 
ft, #ffi©JE^£LTi§{fc^tf&l\ «10 l\ztt 
LTtt, t^ a yf-f tw<6 0 1^6I«i«LTt 

Ai^U »»«*s o l^feftfturtAvs TCP-Git 
MUTte, fl*.fiDMi8£5 o i©ttM«^, tcp- 
GW4 0 l#IPSec SAS:f«J^-t-5^Jt6tto^VNi:^J»rTt 

AV\> £fc4^fttfTCP-GW4 0 1 365, SJioi 

-^6 0 1 tin**. £T©TCP-GW4 0 1 

~4 0 3fc««LTt>«tB-*-5^. »*ttiiV*U 

fl, f&M 10 1, &M)J8£5 0 1 % TCP-GW 4 0 1 , *3 «fc 

t;t^a!if-ftw<6 0 i*ft«i,©ir*aLy -r^fc 

Sfll 1 2 4, 1 5 24, 1 4 2 4, *5«fctfl 6 2 4 
^-CfTfrixSo —J., IPSec SA©lf ##TCP-GW4 0 1 
fc«*3*l,*ltf % «©»fm CfrS;3) ©#&*«!«-? 

[0 0 7 6] rtl^b, («^tf»»S*5 0 

1) ©»ftlcffv^CP-GWSrJE3li-5^o^^wNVK* 
^MBfco^Tat^*. I£»*g5|c5 0 1"C» 

«Stt5**»*©TCP3*^^g>tttt(D««t % ». 
Ktt^5 0 ll^»ft:i-SIPSecSAlf*«r % ftj©TCP-GW 

(« *.tf TCP-GW 4 0 1) ©TCP-GW TCP-GW 

4 0 2) £9lftJKC££#fcS 0 TCP-GW4 0 21*, 

©TCP-GWSrWfo36*o*jSfe-cagLT, K*7»atfT 

STCPHJI«::feZl^B«LT#< i fc*s#a-ei!>S. 
[0 0 7 7] , (NR*^A) *8tt&E£#2l*T 

CP-GW£iB?$1-s, (NR#5£B) *yM7-*ttfcBfi 
31384 if) * s 5EV^TCP-GWS:»Ki-<5, 

[0 0 7 8] »»«5feO*a»4»»^J:0yN^K*7 
**Kfcft8 2:i-Sfc, <NR#5fcA) #a*Lv* D 
U ftS«4(fcB£*n*r fc*T#fty^H-frtett, (NR 

[0 0 7 9] (NR#5fcA) Srjtar^fcfeKl, «itf/ 
n**>»If-/<8 0 1 SrffctfSo TCP-GW 4 0 1 teSifc 
^3 0 1 t 3 0 2, TCP-GW 4 0 2ttXiM3 0 3 t 3 0 
4 , TCP-GW 4 0 3 tegi&ii 3 0 5 ^ 3 0 6 ©teaftfcffi 

*Bf— /<8 0 lfc»*r*-5 e /B+$/fat-/<8 0 
1 ft, TCP-GW 4 0U 4 0 2 OBO/Ny K*7 % TCP-GW 

4 o 2 1 4 o 3<on<o'^> h**7tm&L%z>kmmi- 

5 0 ^ErLT, TCP-GW 4 0 1 fc#LTttTCP-GI4 0 2 
^K*7»ftt45it, TCP-GW 4 0 2t#LTttTCP- 
GW4 0 1 *4 0 3^Kt7«»iftS: TCP-GW 
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4 0 3»C#LTttTCP-GI4 0 2^Kt7»fti45 
wfcS:a*I-f5. -fuP>0^3l«, TCP-GW 4 0 1^4 0 
3©TCP/n^ K*7«HP1 4 1 0 ^D^rv'flf^ 
8 0 l\z£oX'i?t>h,Z> 0 t> ^> A/, TCP-GW 4 0 1- 4 

[0 0 8 0] (HBSfSB) «rjt8W-«fcae>fctt % 

[0 0 8 1] ^r©TCP-GW^JDA1-5^/^^^^ h it 
10 A'-r/SrJtBLTfc*. *TCP-GW©TCPyNVK^7*l«l 
1 4 1 OtfmtrSSlcMBLfc^A'?-*** h/<*-y 

TCP/nVK*7«HI1 4 1 0#iS«7Gfc*=*-** 

[0 0 8 2] St, JtatfciSte, **ioi fcMk 

«*5 0 1 ©IHJT, ^o^^-^aE«rfF*i-8 IPSec SA 
©T"C, TCP-GW 4 0 1 £r:frLT, TCPfcJ: £iiti£f?o 
"tVS ^o^^-/N>K^-7lcff 5*«©5I« 

• ^>-K^7-f8PTffitt©fcSTCP-GW^ ^«>8M:aB 

[0 0 8 3] :«fLV^TCP-GW36Sr©«* 
©»«**HlLfc«Mc, £ ©TCP-GWK BV*fr*>**ttf, 

&B41Mtf 

[0 0 8 4] -IPSec SAflJ«:/NV K * 7 gjg ©»/!># 

[0 0 8 5] h:Hu©TCP-GWe&3 pJfBtt 

© 5 :£ T© TCP-GW t figij B V ^*>* 5 6 ±15 * 
*iS*1f#^fc«IPSec SAtf**»oTlf\IX«, ^©if 
**»*LfcTCP-GWlc:BV^*>-fr5. 

[0 0 8 6] —r/U^^ir^b: IS©TCP-GW-efc^^J|g 
tt©*>5^T©TCP-GWSr^.tf^^^^^ h?/i'—7i 

[0 0 8 7] 4*3, /N>K*7lcfl£5a«tt, JRlUiL 

[0 0 8 8] ^^T, TCP-GW 4 0 1 CO± *~ V =r 4 If «L 
WS1 4 2 4j6^, TCP-GW4 0 2©*fe^r^ yf^ ffif«« 
SI 4 2 4K*tLT, ^f^IPSec SAlfft^^XL fetLTV^ 
S^1"5o TCP-GW 4 0 1 ©-fe^^ y X^if^f311 4 2 
411, ir**. y T^U— /<6 0 1 ^bfffc4lPSec SAlt 
nZnZt. TCP/NyK*7SI»l 4 1 0(C, ^©IPSec 
SAl»««r«tti-^#3fe©TCP-GWtBV>-frto^5 0 X© 
»^ttTCP-GW4 0 2CJ|*t5^#4O-C, TCP-GW 4 0 
lOt^ayf^lWIIl.4 2 4fi, TCP-GW 4 0 2© 
50 -fc*;>.y f-rffiSfll 4 2 4K*fLT, ^©IPSec SA 
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1f$§£^tt1-5 0 TCP-GW4 0 2<Dir*3.!J7^lfSf S 
1 424fi, IPSec SAW««rSPD&SADfcEflrt-5 t # 

f-s ; ecos«7c^Tcp-^w4 o i -efcs rtt, ^ostt 
i$ia]&feirr*o 

[00 8 9] 501 ^SttA 301Ox!l7^ 

S»H3 0 2©ai5r*rjRr; ICXJH1R3 0 3O 

^yr^»»Lfcfci-5. 1-*£tcp-<;w4 o 2#«*i 
o i tfi^so i <Dm<Dmmz&toi-z> 0 tcp-gw4 

0 2©** J *5"r-f flMMfHl 4 24H:, «*101t 
#»dft*5 0 1 ©BO IPSec SAflfHSr, SfiHifcLfcb 
©#TCP-GI4 0 1 VkZZb*9mr&M*s TCP^V 

K*7«IP1 4 1 OteafrLT, TCPq*m<Ds^V*7\Z. 
i&»*fflf«tt, TCP-GW4 0 l*»6>#fejx5r kfcft*. 
5 0 TCP-GW4 0 2<D**^Vy u <<$im f §mi 4 2 

411, TCP-GW4 0 3 <0*fe^r3. li X >f fit S 1 4 2 41: 
#LT, »*i-5IPSec SAflMS*:«*rt-6. £UBtt>fefc 
oTl^fclPSec SAfl»*Srr.OI*jS-C3ifti-5 0»i, TCP- 
GW4 0 S^O/N^K^^OpJIBtt^C^b-CfcS. 

10 0 9 0] TCP^GW4 0 2 <DTCP^ V K^ftflfll 141 

0 J*, TCP-GW4 0 1 <DTC?^> K^7»J«1 1 4 1 0 jfr>b 
»fc, **10 1 £^®J*8;fc5 0 1R|G>TCP=i*^> 3 

TCP1 4 0 1 tftEj»TCPl 4 0 3K#LT 

^ V K tfflWW&tDtfm^ KfcStVC^STCP 

4r^##* % «£l 0 1 £^»«*5 0 loPflfcifch, 
TV^TCPx— 9*>ry h<Oi/—dr fc/jx^ 

*5J:lfIPSecBBit©feattgE^3*-<fc#)Hicli-f 

[0 0 9 1 ] fcfc, JB5I51 0 2#IPSec<D«ffi£jffcji 
V*IP*8;fcT?, ^-^701#t^ a !)r-f*^^it 
T, *y h!7 — ^ 10 2^^5/^7-^2 0 l^ffl 
IPSec-Cift»S*bTV^W^y IPSecOh^ 

R931-* 0 Mobile IPftifttO^^-feA^flSOii^fcta 

[0 0 9 21 ^*102 5 0 2 4>R|4>aflr«r 

S^-r^o W*5 0 2lt 04l:f^fJ:9 4 
lPSec«fe«:«foj8*-e*,5. SS*10 2lt B7|:i 

z<om-vma%?f?mz. a s c*^t/^^7o 

1 5 0 2©IHTireec*fflfflLfcS«&ff 

7 0 1 fc &|t)tt^5 0 2 0F^OIPSec SA#?g££ft, IE 
£"fe3r=. !)7>ft-^ 6 0 1 Sr^M,T» :/n 
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£rfF£1-5IPSec SA(Dffi8^^S4TCP-GW4 0 1 fc&fl: 
*ft5o r^^lcn. IPSec© h^*A^*— KtffflV^fc 
tl&o «*1 0 2 iSnS^5 0 2 0BO/^y M:jf 
^5lPSec/N-^ry 09 (a) 

[0 0 9 3] TCP-GW 4 0 1 TO*jtt»3ttStt£3**<fc# 
4fcfc»rS. fiU **~!>^-ftiMMf«l 4 2 4©fB 
»©TTIPSec*fcV*T#^1rMfcfc*Lfc«to'^:y 

Uco^Ttt, IPAA« 1 4 2 3 3^TCP«jB«rfT 5 
**fe*«rU j&K4»&teTCPl 4 0 1 K/^y 

*^*^ftO«a*ff 5 (0 9 (b) #M) e Rfc*^ 

9#;t ft, SAD^b#fcIPSec SAlf 
Wc$**t5IPSec:/n FaW- KOftd** hyy^ 

*W±* 0fl;itfMobile IP (IETF RFC2002) fCfcSHome Ag 
ent t ForeignAgentOlBO* /Wfc 3 ft TCP/IP^ 

[0 0 9 4] 4*5, ±ie©HJSO^ffi«^(D±t^ife^ 

[0095] *fc % ^m%b*kmmffim<DmzVT?n* 

[0 0 9 6] 

I^^oami K±JE-<fcJ:5ft*»nfcj:iitf, ipse 



I® 2] *^OTCP-GWW/d 7 ^M 0 

[03 ] *%m<om*<D? a ^ ^«^0 e 

[0 4] MSinoVHISfco^ny^MH. 

[0 5] *J8Wot^j)f^twWD y^fl!* 

0o 

« [06] *»WOIPSec«.afflr«(0^-iry h7*-v 

[0 7] *56W©SiJ©»5feoyn y ^«|j*H 0 

[08] **WO/w-^o^n y ^«jaH, 

[0 9] ^aiWOIPSeciftatirftO^^ry h7t-v 
y KO«^0 O 

101. 102, 103 

2 0 1 . 2 0 2, 2 0 3, 2 0 4 *yh7 — 0 

301, 302. 303,304, 305, 306 S 
5tf i^^ 
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